Vulnerability in Black Tie Project
CVE-2002-0446
categorie.php3 in Black Tie Project (BTP) 0.4b through 0.5b allows remote attackers to determine the absolute path of the web server via an invalid category ID (cid) parameter, which leaks the pathname in an error message.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 5.0 (Medium). Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.026 (84.7th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 85th percentile — 84.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.026 · newest: 0.026 · change: 0.000
Affected products
- Black Tie Project — versions 0.4b, 0.5, 0.5b
References
- www.iss.net/security_center/static/8439.php (Patch, vdb-entry, Vendor Advisory)
- www.securityfocus.com/archive/1/261681 (Vendor Advisory, mailing-list)
- www.securityfocus.com/bid/4275 (Exploit, vdb-entry, Vendor Advisory)